Last Updated: 30 Mar 2025
Effective Date: 30 Mar 2025

This Privacy Policy describes the policies of Goblinvault (“we,” “us,” “our”) on the collection, use and disclosure of your personal information when you use our website (https://www.goblinvault.io) (the “Service”). By accessing or using the Service, you consent to the collection, use and disclosure of your information in accordance with this Privacy Policy. If you do not agree, please do not access or use the Service.

1. Data Controller

Goblinvault
Sascha Egger
Neubau 9
2000 Stockerau
Austria
Email: info@goblinvault.io

We process your personal data only when we have a legal basis under the GDPR, including:

  • Contract Performance (Art. 6 (1)(b)) – creating and managing your user account; processing payments.
  • Consent (Art. 6 (1)(a)) – targeted advertising, analytics and cookies (via our Cookie Policy).
  • Legitimate Interests (Art. 6 (1)(f)) – site security, fraud prevention, abuse detection, and improving our Service.
  • Legal Obligation (Art. 6 (1)(c)) – compliance with record-keeping or reporting duties under applicable law.

3. Information We Collect

We collect and process the following categories of personal data:

  • Contact & Identity Data: email address, social media profile identifiers, name.
  • Payment Data: billing address, payment method details (processed via PCI-compliant third-party).
  • Usage Data: IP address, browser type/version, device identifiers, pages visited, time stamps.
  • User-Generated Content: comments or messages you post on the site.

4. Recipients of Your Data

Your personal data may be shared with:

  • Service Providers: hosting (e.g. [Hosting-Provider Name], EU/Austria), email delivery, payment processors (e.g. Stripe), analytics providers (e.g. Google Analytics).
  • Security & Fraud Prevention: anti-fraud services, CDN providers.
  • Legal & Regulatory Authorities: when required by law or to protect rights.

We require all processors to keep your data secure and to use it only to provide the contracted service.

5. International Transfers

Some of our service providers (e.g. analytics or payment processors) may be located outside the EU/EEA (for example, in the United States or Republic of Korea). When we transfer your data to third countries, we rely on:

  • Standard Contractual Clauses approved by the European Commission,
  • or other GDPR-compliant transfer mechanisms.

6. Retention of Your Information

We retain personal data only as long as necessary to fulfill the purposes listed above, or:

  • Account Data: 90 days to 2 years after your account becomes inactive.
  • Legal Records: longer periods if required by law (e.g. tax, fraud prevention).
  • Aggregate/Anonymous Data: indefinitely for statistical purposes.

7. Your Rights Under GDPR

Depending on applicable law, you have the right to:

  • Access & Portability: request a copy of your data (Art. 15–20).
  • Rectification & Erasure: correct or delete inaccurate or unnecessary data (Art. 16, 17).
  • Restriction & Objection: limit or object to our processing (Art. 18, 21).
  • Withdraw Consent: for processing based on consent (Art. 7 (3)).
  • Lodge a Complaint: with your local supervisory authority (see below).

To exercise any right, contact us at info@goblinvault.io. We respond within one month (extended by two months if needed under Art. 12 (3)).

8. Supervisory Authority

If you believe we have breached data protection law, you may lodge a complaint with:
Austrian Data Protection Authority
Wickenburggasse 8
1080 Vienna
Email: dsb@dsb.gv.at

9. Cookies & Tracking Technologies

We use cookies and similar tracking for functionality, analytics, and advertising.

10. Security

We implement reasonable technical and organizational measures to protect your data. However, no internet transmission is 100 % secure—transmit at your own risk.

Our Service may contain links to third-party sites. This Privacy Policy does not cover their practices. We are not responsible for their content or privacy measures. Review their policies before sharing personal data.

12. Grievance / Data Protection Officer

Questions or concerns? Email our Grievance Officer at info@goblinvault.io. We will address your inquiry in accordance with applicable law.